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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

1 . (Currently amended) A content management method for [[a]] managing 
content data storag e provided with a plura li ty of content stor i ng m e ans to user 
eguipment , comprising the steps of: 

storing a content key encrypted with a first storage key A i n a f i rst cont e nt stor i ng 
m e ans, and storing along w i th sa i d content k e y e ncrypted w i th tho f i rst storage k e y a 
content data encrypted with the content key , and a second storage key in the user 
eguipment : 

sending the encrypted content key and the second storage key to a key 
management unit: 

at the key management unit, decrypting the encrypted content key with using the 
first storage key , the first storage key being stored in the key management unit : and 

encrypting the decrypted content key obta i n e d by tho abovo decryption with a 
n e w l y g e n e rat e d using the second storage key[[,]]; 

stor i ng sending the content key encrypted with the second storage key along with 
the encrypted content in a s e cond content stor i ng moans to the user eguipment : and 

ro encrypting at the user eguipment, decrypting the encrypted content key using 
a us e r the second storage key and stor i ng decrypting the content data to an ext e rna l 
storag e m e d i um using the decrypted content key . 
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2. (Original) The method as set forth in Claim 1 , wherein the second storage key 
is generated based on a random number. 



3. (Currently amended) The method as set forth in Claim 1 , wherein the 
decrypted content key obta i nod by tho decrypt i on is encrypted with identification 
information of the s e cond cont e nt storing m e ans user equipment and stored into the 
s e cond cont e nt stor i ng m e ans user equipment . 

4. (Currently amended) The method as set forth in Claim 1 , wherein the 
content key is encrypted, in the first content stor i ng means user equipment with the first 
storage key and identification information of the f i rst cont e nt storing m e ans user 
equipment and the content key stored in the f i rst cont e nt storing m e ans user equipment 
is decrypted with the first storage key and the identification information of the fifst- 
cont e nt stor i ng m e ans user equipment . 

5. (Currently amended) The method as set forth in Claim 1 , wherein the 
second storage key is generated by a decrypted key generating means provided in the 
data storag e user eguipment . 

6. (Currently amended) The method as set forth in Claim 5, wherein the 
second storage key is encrypted with a public key for [[a]] the key management unit for 
management of the storage keys to generate a third storage key and the third storage 
key is stored into the s e cond cont e nt storing m e ans user equipment . 
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7. (Currently amended) The method as set forth in Claim 6, wherein the data- 
storage user equipment deletes the second storage key depending upon whether the 
third storage key has been stored in the socond content stor i ng moans user equipment . 

8. (Currently amended) The method as set forth in Claim 7, wherein when 
decrypting the content key stored in the socond contont storing moans user equipment , 
the data storag e user equipment sends the third storage key to the key management 
unit; and the key management unit generates [[a]] the second storage key based on the 
third storage key while accounting the data service following a predetermined 
procedure. 

9. (Currently amended) The method as set forth in Claim 1 , wherein the 
second storage key is generated by a storage key generating means provided in the 
key management unit which manages the storage keys; and the key management unit 
has stored therein the second storage key and the identification information of the 
s e cond contont stor i ng m e ans user equipment in which the content key encrypted with 
the above generated second storage key is stored . 

10. (Original) The method as set forth in Claim 9, wherein upon the generation of 
the second storage key, the key management unit accounts the data service following 
the predetermined procedure. 
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1 1 . (Currently amended) The method as set forth in Claim 9, wherein the key 
management unit encrypts the second storage key with the management key to 
generate a third storage key, and sends the third storage key to the data storag e user 
equipment ; and the data storag e user equipment stores the received third storage key 
into th e s e cond cont e nt stor i ng m e ans . 

12. (Currently amended) The method as set forth in Claim 11, wherein the data 
storag e user equipment deletes the second storage key depending upon whether the 
third storage key has been stored i n th e s e cond cont e nt stor i ng m e ans . 

13. (Currently amended) The method as set forth in Claim 12, wherein the key 
management unit has stored therein the identification information of the second cont e nt 
storing m e ans user equipment in which the content key encrypted with the second 
storage key is stored ; the data storag e user equipment sends, when decrypting the 
content key stored in the s e cond cont e nt stor i ng moans user equipment , the 
identification information of the s e cond cont e nt stor i ng m e ans user equipment to the key 
management unit; and the key management unit generates [[a]] the second storage key 
based on the result of comparison between the identification information of the s e cond 
cont e nt stor i ng m e ans user equipment , send sent from the data storag e user 
equipment , and the identification information of the s e cond contont stor i ng means user 
equipment , held in the key management unit itself, while accounting the data service 
following the predetermined procedure. 
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14. (Currently amended) The method as set forth in Claim 1, wherein the 
s e cond cont e nt stor i ng m e ans user equipment has stored therein the identification 
information of the data storag e user equipment . 

15. (Currently amended) The method as set forth in Claim 14, wherein the data- 
storag e user equipment starts decrypting the content key stored in the s e cond cont e nt 
stor i ng m e ans user equipment depending upon the result of an inspection of the 
identification information of the data storag e user equipment , stored in the s e cond 
cont e nt storing m e ans user equipment . 

16. (Currently amended) The method as set forth in Claim 1 , wherein the 
decrypted content key supplied from the s e cond cont e nt stor i ng m e ans user eguipment 
has added thereto information that the content key i s a on e has been obtained by 
restoration. 

17. (Currently amended) The method as set forth in Claim 16, wherein when 
moving the content key having added thereto the information that the content key is-a 
r e stor e d on e has been obtained by restoration , the data storag e user eguipment 
performs mak e s an error process based on the result of comparison between the 
content key and [[a]] another content key stored in a destination to which the content 
key is to be moved. 
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1 8. (Original) The method as set forth in Claim 1 , wherein the content key has 
added thereto frequency information which limits the number of times the content key 
can be used. 

1 9. (Currently amended) The method as set forth in Claim 1 , wheroin further 
comprising storing the content key stor e d i n tho f i rst content stor i ng m e ans is storod 
encrypted with the second storage key in a first storage of the user eguipment along 
with the identification information of the first content storing m e ans first storage: storing 
the content key that is stored in the first storage, and the identification information of the 
first storage, into th e s e cond cont e nt storing m e ans a second storage of the user 
eguipment ; th e id e nt i ficat i on information storod i n tho s e cond cont e nt stor i ng m e ans i s 
storod i nto th e data storag e whon tho content k e y storod in th e s e cond content storing 
m e ans i s decrypted ; and th e data storag e mak e s performing , when a request is made to 
decrypt the content key in the f i rst content storing m e ans first storage , an error process 
based on the result of comparison between the identification information of the fifst- 
cont e nt storing m e ans i n cons i derat i on first storage and the identification information of 
the s e cond cont e nt stor i ng m e ans second storage . 

20. (Currently amended) A content storag e management system for managing 
content data , comprising: 

a first content storing means having stored therein a content key encrypted with a 
first storage key A and a content data encrypted with the content key , and a second 
storage key ; 
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a first sending means for sending the encrypted content key and the second 
storage key to a key management unit: 

a first decrypting means , in the key management unit for decrypting the 
encrypted content key data using the first storage key, the first storage key being stored 
in the key management unit ; 

an encrypting means for encrypting the decrypted content key data using the 
second storage key ; and 

m e ans for g e nerat i ng a f i rst storag e k e y; 

moans for generat i ng a s e cond storage k e y; 

a s e cond content stor i ng m e ans for stor i ng an encrypt e d content k e y obta i ned by 
e ncrypt i ng, i n th e e ncrypt i ng means, the cont e nt k e y obta i n e d by decryption w i th the 
f i rst storag e k e y i n th e d e crypting m e ans, us i ng th e s e cond storag e k e y g e n e rat e d by 
th e s e cond storag e k e y g e n e rating m e ans, and th e e ncrypt e d cont e nt; and 

moans for storing th e storage k e ys; 

a second decrypting means for r e e ncrypt i ng decrypting the encrypted content 
key using a us e r the second storage key and stor i ng decrypting the content data to an 
externa l storag e m e dium using the decrypted content key . 

21 . (Currently amended) The system as set forth in Claim 20, whero i n tho 
further comprising storage key stor i ng generating means generat e s for generating the 
second storage key by means of a random number generator. 
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22. (Currently amended) The system as set forth in Claim 20, wherein a- 
cont e nt k e y obta i n e d by e ncrypting, in tho encrypt i ng m e ans, the encrypting means 
encrypts the decrypted content key obta i ned by th e decrypt i on i n th e d e crypt i ng m e ans, 
with th e f i rst storag e k e y and identification information of the a second content storing 
means , i s stor e d i n th e s e cond cont e nt stor i ng m e ans . 

23. (Currently amended) The system as set forth in Claim 20, wherein the 
content key is encrypted, in the first cont e nt storing means, with the first storage key 
and identification information of the first cont e nt storing means; and the content key 
stored in the first content storing means is decrypted with the first storage key and the 
identification information of the first cont e nt storing means. 

24. (Currently amended) The system as set forth in Claim 20, wherein the first 
cont e nt storing means, first decrypting means, and encrypting means , s e cond cont e nt 
stor i ng m e ans, storag e k e y stor i ng m e ans and storag e k e y g e n e rat i ng m e ans form 
together a data storage[[;]] A and further compr i s i ng a wherein the key management unit 
which manages the second storage keys key of the data storage. 

25. (Currently amended) The system as set forth in Claim 24, wherein the data 
storage is a data receiver which receives a content data encrypted and sent from a data 
transmitter. 
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26. (Currently amended) The system as set forth in Claim 24, further 
comprising means for storing the a public key of the key management unit; and wherein 
the second content storing means has stored therein the second storage key along with 
a third storage key obtained by encrypting the second storage key with the public key. 

27. (Currently amended) The system as set forth in Claim 26, wherein the data 
storage deletes the second storage key depending upon whether the third storage key 
is stored in the second cont e nt storing means. 

28. (Currently amended) The system as set forth in Claim 27, wherein^ when 
decrypting the content key stored in the second cont e nt storing means, the data storage 
sends the third storage key to the key management unit; and the key management unit 
sends [[a]] the second storage key generated based on the third storage key to the a 
data transmitter while accounting the data service following a predetermined procedure. 

29. (Currently amended) The system as set forth in Claim 24, wherein the 
second content storing means has stored therein the identification information of the 
data storage. 

30. (Currently amended) The system as set forth in Claim 29, wherein the data 
storage starts decrypting the content key stored in the second cont e nt storing means 
depending on the result of inspection of the identification information of the data 
storage, stored in the second cont e nt storing means. 
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31 . (Currently amended) The system as set forth in Claim 20, wherein the first 
cont e nt storing means, first decrypting means, and encrypting means , second cont e nt 
stor i ng m e ans and storag e k e y stor i ng m e ans form together a data storage; and 
comprising the a storage key generating means A and furth e r a wherein the key 
management unit which manages the second storage keys key of the data storage. 

32. (Currently amended) The system as set forth in Claim 31 , wherein the data 
storage is a data receiver which receives a content data encrypted and sent from a data 
transmitter. 

33. (Currently amended) The system as set forth in Claim 31 , wherein the key 
management unit comprises an identification information storing means in which the- 
storag e k e y g e n e rat e d by th e k e y manag e m e nt unit and th e identification information of 
the cont e nt first storing means i n wh i ch th e cont e nt k e y e ncrypt e d with th e g e n e rat e d 
storag e k e y is stored . 

34. (Currently amended) The system as set forth in Claim 31 , wherein the key 
management unit accounts the data service following the predetermined procedure 
depending upon the a generation of the second storage key. 

35. (Currently amended) The system as set forth in Claim 31 , wherein the key 
management unit comprises means for storing storage keys; the key management unit 
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generates a third storage key by d e crypt i ng encrypting the second storage key with tbe- 
storage a management key and sends [[it]] the third storage key to the data storage; 
and the data storage stores the third storage key into the second cont e nt storing means. 

36. (Currently amended) The system as set forth in Claim 35, wherein the data 
storage deletes the second storage key depending upon whether the third storage key 
is stored into in the second cont e nt storing means. 

37. (Currently amended) The system as set forth in Claim 36, wherein the key 
management unit comprises means for storing the second storage key and the 
identification information of the second cont e nt storing means in which the content key 
encrypted with the second storage key is stored; the key management unit accounts, 
when the data storage decrypts the content key, the data service following the 
predetermined procedure based on the result of comparison between the identification 
information of the second cont e nt storing means, sent from the data storage, and the 
identification information stored in the an identification information storing means. 

38. (Currently amended) The system as set forth in Claim 31 , wherein the 
second cont e nt storing means has stored therein the identification information of the 
data storage. 

39. (Currently amended) The system as set forth in Claim 38, wherein the data 
storage starts decrypting the content key stored in the second cont e nt storing means. 
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40. (Currently amended) The system as set forth in Claim 20, wherein the 
content key obtained by decryption from the second contont storing means has added 
thereto information that the content key i s a one has been obtained by restoration, as 
requirement information. 

41 . (Original) The system as set forth in Claim 20, wherein the content key has 
added thereto frequency information which limits the number of times the content key 
can be used. 
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